MAL-2025-69960 Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67741 Malicious code in developed-amethyst-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b1cccc4e10dc3fe415a27aa22285a79ddccb3a1868f2de2b66e2844cb4ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67932 Malicious code in economic-blush-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c136b75355a828f2c5cebd7e064c53de7f25c0f3cffdc33e4ff9ade4ebf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69210 Malicious code in long-yellow-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4380fdc0c59b0e6ec9eed42a7fa12eb2228be72f34ac94de3e169d650af7df05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67209 Malicious code in classical-aquamarine-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64482e0adb352d7d09cf79aba8eeb20c513d1bfa891655b4e188668a5fc0aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67787 Malicious code in distant-coral-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa775f2fc9bdcac13e8543a7305228ed4803521eb07029d18b10369c4f5c109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual-turquoise-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5656eb44aaa094427fcb494a122ef8efcb1557b55a785ccff22de593838a76fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed-yellow-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3e903df9704e54ced43950551d0260939c2b3525c89af263f72d7a8f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70546 Malicious code in severe-lavender-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a28600d212e6aebd7404ed287bf4e9d6b829f9d0806200fa0a347310989478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69971 Malicious code in preferred-brown-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8535d9a5cabc2038667a723f22807654c370f2c1b0b70b7fce54dbc945c68f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71091 Malicious code in then-red-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1a5fe98331be193a2517d96daa404c77c3a5e172d79174ccf68e8e0bd52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66858 Malicious code in asleep-cyan-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8649c4869e067f65e35d102bfaec24ac0b85293aa432f1c5d7b4c477294b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70555 Malicious code in shaggy-gold-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c27fd20786e557024a8e871bad40f601a40e7c6c09ac823efe36308295988d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68497 Malicious code in gastric-emerald-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1113a67f20681729c53efac197a03c46b808c456961a910e84ec6027a29be054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67118 Malicious code in casual-coffee-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a7b2bdbe1609b297c3b2001fab719b990a21c786a4cbc1b20e57aff9830a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68737 Malicious code in hungry-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568ad991a1aa8eb68da6a2553c8bc9ad0215e373aa4f9e30e3f9c07ea3624f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67270 Malicious code in cold-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba0c8c0ef31de546b826e9a644184270d18cd0e8d297fb1659928192786480b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71029 Malicious code in systematic-ivory-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b8e260b6e54bde8b8b7db1f6a85512159b40358c29145e90c83155a95d974c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71102 Malicious code in thick-blush-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e7f22ffc7eb1f8bb057285924ccebd99dc41765eadfeb30c0bf751ce37087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...